[Jan-2022] The Best CCNP Data Center Study Guide for the 300-620 Exam
300-620 certification guide Q&A from Training Expert Prep4King
NEW QUESTION 60
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.
Answer:
Explanation:
Explanation
Application profile---> VRF--> Bridge Domain---> EPG
NEW QUESTION 61
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
- A. over Layer 3 IPN connectivity via spines
- B. over Layer 3 Out connectivity via border leafs
- C. over Layer 3 directly connected back-to-back spines
- D. over Layer 3 IPN connectivity via border leafs
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/w
NEW QUESTION 62
Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?
- A. common
- B. default
- C. mgmt
- D. infra
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Configuring_Static_Management_Access.html#concept_CFF63FEBE947424291B0F10E6F23DA7D
NEW QUESTION 63
Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?
- A. adjacency
- B. endpoint
- C. ARP
- D. RIB
Answer: B
NEW QUESTION 64
Which protocol does ACI use to securely sane the configuration in a remote location?
- A. SCP
- B. HTTPS
- C. TFTP
- D. FTP
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Using_Import_Export_to_Recover_Config_States.html
NEW QUESTION 65
The company ESXi infrastructure is hosted on the Cisco UCS-B Blade Servers. The company decided to take advantage of ACI VMM integration to enable consistent enforcement of policies across virtual and physical workloads. The requirement is to prevent the packet loss between the distributed virtual switch and the ACI fabric. Which setting must be implemented on a vSwitch policy to accomplish this goal?
- A. Static Channel
- B. MAC Pinning
- C. LACP
- D. LLDP
Answer: B
NEW QUESTION 66
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)
- A. extending the EPG out of the ACI fabric
- B. extending the bridge domain out of the ACI fabric
- C. creating a single homed Layer 3 Out
- D. creating an external physical network
- E. extending the routed domain out of the ACI fabric
Answer: A,E
NEW QUESTION 67
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?
- A. No source MAC or IP address of the traffic is learned as a remote endpoint.
- B. The source IP address of the traffic is learned as a remote endpoint.
- C. The source MAC address of the traffic is learned as a remote endpoint.
- D. The source MAC and IP address of the traffic is learned as a local endpoint.
Answer: B
NEW QUESTION 68
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. link level policy
- B. ingress control plane policing policy
- C. ingress data plane policing policy
- D. L2 interface policy
- E. slow drain policy
Answer: A,C
Explanation:
Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope.
NEW QUESTION 69
An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary. Which configuration set must be used to meet these requirements?
- A. Under the Create Remote location settings, select Protocol: FTP
Under the Export policy, select
- Format: XML
- Modify Global AES Encryption Settings: Enabled - B. Under the Create Remote location settings, select Protocol: SCP
Under the Export policy, select
- Format: JSON
- Modify Global AES Encryption Settings: Enabled - C. Under the Create Remote location settings, select Protocol: FTP
Under the Export policy, select
- Format: XML
- Modify Global AES Encryption Settings: Disabled - D. Under the Create Remote location settings, select Protocol: SCP
Under the Export policy, select
- Format: JSON
- Modify Global AES Encryption Settings: Disabled
Answer: B
NEW QUESTION 70
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?
- A. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
- B. It is forwarded to one of the spines to perform as a spine proxy.
- C. It is forwarded to one of the APICs to perform as a proxy.
- D. It is flooded within the whole fabric.
Answer: B
NEW QUESTION 71
An engineer must ensure that Cisco ACI flushes the appropriate endpoints when a topology change notification message is received in an MST domain. Which three steps are required to accomplish this goal? (Choose three.)
- A. Create a new region policy under the spanning tree policy.
- B. Map VLAN range to MAT instance number.
- C. Enable the BPDU interface controls under the spanning tree interface policy.
- D. Associate the STP interface policy to the appropriate interface policy group.
- E. Bind the spanning tree policy to the switch policy group.
- F. Configure a new STP interface policy.
Answer: C,D,F
NEW QUESTION 72
What happens to the traffic flow when the Cisco ACI fabric has a stale endpoint entry for the destination endpoint?
- A. The leaf switch floods the traffic to the endpoint throughout the fabric.
- B. The leaf switch does not learn the source endpoint through data plane learning.
- C. The leaf switch sends the traffic to the wrong destination leaf.
- D. The leaf switch drops the traffic that is destined to the endpoint.
Answer: D
Explanation:
Section: ACI Packet Forwarding
Explanation/Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKACI-2641.pdf
NEW QUESTION 73
An engineer is implementing a Cisco ACI environment that consists of more than 20 servers. Two of the servers support only Cisco Discovery Protocol with no order link discovery protocol. The engineer wants the servers to be discovered automatically by the Cisco ACI fabric when connected. Which action must be taken to meet this requirement?
- A. Create an override policy that enables Cisco Discovery Protocol after LLDP is enabled in the default policy group.
- B. Create an interface profile for the interface that disables LLDP on the desired switch that is referenced by the interface policy group.
- C. Configure a lower order policy group that enables Cisco Discovery Protocol for the interface on the desired leaf switch.
- D. Configure a higher order interface policy that enables Cisco Discovery Protocol for the interface on the desired leaf switch.
Answer: A
NEW QUESTION 74
An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?
- A. Inspect /var/log/audit_messages on the APIC to see a record of all user actions.
- B. Inspect the output of show command history in the APIC CLI.
- C. Inspect event records in the APIC UI to see all actions performed by users.
- D. Inspect audit logs in the APIC UI to see all user events.
Answer: C
NEW QUESTION 75
An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map for route filtering?
- A. External Subnets for the External EPG
- B. Shared Route Control Subnet
- C. Shared Security Import Subnet
- D. Import Route Control Subnet
Answer: D
NEW QUESTION 76
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?
- A. cisco-av-pair
- B. cisco-security domain
- C. cisco-auth-features
- D. cisco-aci-role
Answer: A
Explanation:
Section: ACI Management
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/ b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html
NEW QUESTION 77
Refer to the exhibit.
An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are to be connected to the ACI leaves. The server team requires the network switches to initiate the LACP negotiation as opposed to the servers. The LAG group consists of two 10 Gigabit Ethernet links. The server learn also wants to evenly distribute traffic across all available links. Which two enhanced LAG policies meet these requirements? (Choose two.)
- A. LB Mode: Destination IP Address and TCP/UDP Port
- B. LB Mode: Source and Destination MAC Address
- C. LACP Mode: LACP Standby
- D. LB Mode: Source IP Address and TCP/UDP Port
- E. LACP Mode: LACP Active
Answer: B,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/aci_virtual_edge/configuration/2-x/Cisco-ACIVirtual- Edge-Configuration-Guide-202/Cisco-ACI-Virtual-Edge-Configuration-Guide-202_chapter_0100.html
NEW QUESTION 78
Which statement about ACI syslog is true?
- A. All syslog messages are sent to the destination through APIC.
- B. Notifications for different scopes of syslog objects can be sent only to one destination.
- C. Switches send syslog messages directly to the destinations.
- D. Syslog messages are sent to the destination through the spine.
Answer: C
NEW QUESTION 79
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
Answer:
Explanation:
NEW QUESTION 80
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. ACL on the console interface
- B. ACL on the management interface of the APIC
- C. policy on the management VLAN
- D. policy In the management tenant
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Oper
NEW QUESTION 81
Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?
- A. adjacency
- B. endpoint
- C. ARP
- D. RIB
Answer: B
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html
NEW QUESTION 82
Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)
- A. Layer 3 outside interface association
- B. IP address pool association
- C. EPG static port binding
- D. EPG association
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_01011.html#concept_74EFC437C0AA44A391676F70ACE59DF3
- E. VMM domain profile
Answer: D,E
NEW QUESTION 83
What must be configured to allow SNMP traffic on the APIC controller?
- A. out-of-band bridge domain
- B. out-of-band management interface
- C. SNMP relay policy
- D. contract under tenant mgmt
Answer: D
Explanation:
Section: ACI Management
NEW QUESTION 84
......
Each of these topics contains the specific technical skills that the candidates must master before attempting this test. They are as follows:
ACI Fabric Infrastructure: The learners need to demonstrate their ability to explain ACI hardware as well as topology; explain ACI Object Model; apply audit log, faults, event record; determine ACI fabric discovery; apply ACI policies such as fabric and access; apply ACI logical constructs (consumer, tenant, reverse port filter, filter, provider, VRF enforced; VRF; bridge domain, including unicast routing, Layer 2 unknown hardware proxy, ARP flooding; application profile; EPG endpoint groups).
ACI Packet Forwarding: The skills measured in this objective include describing endpoint learning; applying bridge domain configuration (ARP flooding; Layer 2 unidentified hardware proxy; unicast routing).
External Network Connectedness: In the framework of this section, the individuals are required to prove that they are capable of applying Layer 2 out (STP/MCP fundamentals) as well as applying Layer 3 out (excludes transit routing as well as VRF route leaking).
Integrations: This subject checks one’s ability to integrate VMware vCenter DVS; explain resolution immediateness within VMM; apply managed as well as unmanaged graph.
ACI Management: The domain covers your skills, such as applying out-of-band as well as in-band; applying syslog as well as snmp services; executing configuration backup (config or snapshot import export); executing AAA and RBAC; configuring an update.
ACI Anywhere: Within this topic area, the examinees should prove their competency in explaining multipod as well as determining multisite.
The Best Cisco 300-620 Study Guides and Dumps of 2022: https://www.prep4king.com/300-620-exam-prep-material.html
300-620 Certification Overview Latest 300-620 PDF Dumps: https://drive.google.com/open?id=16X4S8O-sCQCaYW2vySqgkU7f8Ah9OOmt
